Go/github.com/sjqzhang/go-fastdfs CVE-2023-1800: critical 9.8, EPSS 3.55%

sjqzhang go-fastdfs vulnerable to path traversal

Action: Upgrade github.com/sjqzhang/go-fastdfs to 1.4.5-0.20230408141131-61cbff5124c6 or later.

go get github.com/sjqzhang/go-fastdfs@v1.4.5-0.20230408141131-61cbff5124c6

Affected

Fixed versions

Sources

• osv: GHSA-xq3x-grrj-fj6x
• https://nvd.nist.gov/vuln/detail/CVE-2023-1800
• https://github.com/sjqzhang/go-fastdfs/commit/61cbff5124c61e292994099372b11c06cdb5b80b
• https://github.com/sjqzhang/go-fastdfs
• https://github.com/yangyanglo/ForCVE/blob/93a16663cd32a36d37d8a0f0102e1592254d0279/2023-0x05.md
• https://github.com/yangyanglo/ForCVE/blob/main/2023-0x05.md
• https://vuldb.com/?ctiid.224768
• https://vuldb.com/?id.224768

CVE-2023-1800 · published 2023-04-02T12:30:16Z · modified 2024-05-20T21:50:28Z · JSON